Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa
File:                     a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json)
Hash identifier:          ku5LQem/VuBckl9uVXEkC8FFoVf0sjKnYXiB5WgPOVw=
Subject key identifier:   2A:3F:6E:62:6C:80:24:B3:21:D9:E7:3F:53:7D:A4:8C:AE:8C:00:E2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB56CB5930FE79EA06E12E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        71.30.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:6c:b5:93:0f:e7:9e:a0:6e:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=84b1c9fc-fec6-4faf-914c-970c363b1d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:8a:10:c0:3f:75:a2:df:9a:19:77:da:28:
                    97:d4:7e:5b:55:3d:00:e5:c6:67:45:62:8b:d0:31:
                    c0:f2:bc:da:65:d4:87:a2:b4:82:6d:26:29:06:6f:
                    2c:6f:b5:00:90:17:eb:cf:64:7c:34:8f:15:90:07:
                    35:30:a1:63:ba:20:ed:e2:38:39:7d:ee:df:bf:e2:
                    10:4c:23:04:58:40:f3:cc:1b:a7:fd:07:c2:28:fb:
                    c9:a3:8e:8a:98:e0:bd:65:35:68:90:83:17:ad:65:
                    0c:c6:b9:a7:96:f1:fc:64:ce:38:af:28:0e:a1:e0:
                    2c:f9:02:5a:fc:33:28:25:9d:71:22:0b:26:b5:7f:
                    a1:51:1b:a1:72:89:1d:70:99:de:b3:1f:5a:8b:05:
                    90:03:64:d7:51:9b:17:dd:a9:33:f3:ae:fd:ec:ff:
                    1e:f0:97:2d:9c:92:85:b2:99:a8:2d:b9:b8:3f:14:
                    b4:59:e8:52:9e:96:68:cb:22:5c:1d:0c:5f:d9:d4:
                    51:8c:47:54:d0:40:26:eb:84:95:fa:ca:2f:98:60:
                    29:3a:4b:19:55:44:69:93:7e:11:b1:af:4f:69:42:
                    f5:b0:64:95:4b:be:49:ed:21:37:3d:2a:02:37:cb:
                    46:e2:c0:d6:d7:e3:9b:36:87:09:4d:eb:c5:a2:dc:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3F:6E:62:6C:80:24:B3:21:D9:E7:3F:53:7D:A4:8C:AE:8C:00:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:11:23:b8:99:f2:43:2a:97:ae:a6:a0:34:c6:9b:67:9e:33:
         a1:a2:75:07:5f:32:0e:d0:e6:53:17:54:e5:98:1a:4d:e2:ab:
         e6:68:cd:6a:3c:43:da:69:72:6a:6f:85:6f:fe:f4:4b:7c:e1:
         bc:b8:e7:e3:3e:05:86:03:db:28:17:aa:33:c8:12:a8:d9:08:
         b7:4f:e6:66:2e:a2:f6:7d:7b:15:42:d9:7c:f4:6c:47:52:20:
         79:13:10:87:4a:9e:c4:95:ff:98:5b:dc:ff:5e:7e:10:f7:c2:
         86:9d:65:80:79:a0:49:38:54:be:3b:c8:26:57:fa:fd:08:6f:
         a9:26:28:f5:3f:50:6a:ac:8c:83:bb:3e:bc:4c:b6:dd:dd:22:
         4b:8f:52:8b:1a:b1:0d:2e:e9:d5:4f:7b:cf:b1:66:e2:ff:2c:
         f6:0f:1f:04:1c:f1:7b:be:5a:99:2b:3d:87:b4:7c:ff:5c:b9:
         e6:5c:a7:ec:cc:1d:57:df:c6:37:76:34:45:89:37:cb:b5:45:
         5e:93:76:0d:d6:79:5f:2e:cb:61:1e:82:d0:22:0f:00:28:f7:
         68:2f:91:91:d3:2a:8c:f6:62:9f:98:4f:70:d5:4a:6e:52:73:
         28:3d:24:85:7d:10:9b:8a:c0:a2:97:9b:1a:c6:d9:f6:0b:01:
         df:5e:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:11 2025 by rpki-client